Commit graph

Select branches

Hide pull requests

andrew/ecr-auth

andrew/lightweight-gcs-backend

artifacts-adoption

bump-deps

bump-deps-v0.4.0

bump-vulnerable-deps

bump-x-net

composer-unset-sentinel

configurable-upstreams

cosign-signing

deps/pre-v0.7.0

enforce-max-size-eviction

fix-197-cooldown-scoped-purls

fix-database-log-173

homebrew-proxy-247

http-timeout-config

issue-186-container-offline-auth

issue-186-upstream-auth

issue-225-sign-container-image

issue-226-helm-chart

julia-support

lint-cleanup

main

path-traversal-decode

perf/cache-hit-path

pin-vendored-assets

registries-v0.6.0-cooldown

swift-registry-support

ui-polish

use-database-package

validate-package-name

#1

#10

#100

#101

#102

#103

#104

#105

#106

#107

#108

#109

#11

#110

#111

#113

#114

#115

#117

#119

#120

#121

#122

#124

#125

#13

#135

#136

#137

#138

#139

#14

#140

#146

#148

#15

#150

#151

#152

#153

#154

#156

#157

#158

#159

#160

#161

#162

#163

#164

#165

#166

#167

#167

#168

#169

#17

#170

#171

#172

#174

#175

#176

#177

#178

#179

#18

#180

#181

#185

#188

#189

#19

#190

#191

#192

#193

#194

#195

#196

#198

#199

#2

#200

#201

#202

#203

#204

#205

#206

#209

#21

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#223

#224

#227

#229

#23

#230

#232

#233

#234

#235

#237

#238

#238

#24

#240

#241

#243

#243

#244

#245

#246

#25

#250

#250

#251

#252

#253

#254

#254

#255

#255

#257

#258

#259

#259

#26

#260

#267

#267

#268

#269

#27

#270

#272

#273

#275

#275

#277

#278

#278

#279

#28

#280

#280

#281

#281

#29

#3

#30

#31

#32

#33

#35

#36

#37

#38

#39

#4

#40

#44

#45

#46

#47

#48

#5

#50

#51

#57

#58

#59

#6

#60

#63

#64

#66

#67

#68

#69

#7

#70

#71

#72

#77

#79

#8

#80

#81

#82

#83

#84

#85

#87

#88

#89

#9

#90

#91

#92

#93

#93

#94

#95

#97

#98

v0.1.0

v0.2.0

v0.2.1

v0.3.0

v0.3.1

v0.3.2

v0.4.0

v0.5.0

v0.5.1

v0.6.0

v0.6.1

v0.7.0

Mono Color

• 027656a99d
  Bump dependencies ahead of v0.7.0 deps/pre-v0.7.0 Andrew Nesbitt 2026-08-06 21:55:49 +01:00
• 028e78bc3a
  Bump github.com/git-pkgs/spdx from 0.1.4 to 0.2.0 dependabot[bot] 2026-08-06 15:17:13 +00:00
• 7fa2394f63
  Bump github.com/prometheus/client_golang from 1.24.0 to 1.24.1 dependabot[bot] 2026-08-06 15:16:58 +00:00
• 48992051f5
  Bump docker/login-action from 4.5.0 to 4.6.0 dependabot[bot] 2026-08-06 15:14:15 +00:00
• 02519df215 Revert "test run" Ondrej Kokes 2026-08-06 13:48:29 +02:00
• 355e8f867e test run Ondrej Kokes 2026-08-06 13:43:12 +02:00
• 328db8a4ee pin to latest version, not commit Ondrej Kokes 2026-08-06 13:42:27 +02:00
• 4848f62886 wip Ondrej Kokes 2026-08-06 13:39:57 +02:00
• 800ffc6b38
  Make Debian upstream repository configurable. (#229) Vincent Palatin 2026-08-05 18:48:00 +02:00
• 2777b06904 Make Debian upstream repository configurable Vincent Palatin 2026-08-05 10:06:05 +00:00
• 70d098ca18 Refactor LoadFromEnv to use helpers Vincent Palatin 2026-08-05 09:56:22 +00:00
• 0f9668f824
  Merge 1ba2684d78 into 63f0efd0e9 Tilian Honig 2026-08-03 11:16:31 +01:00
• 63f0efd0e9
  fix(pypi): resolve name and version for PEP 658 metadata sidecars (#222) wickedOne 2026-08-03 12:14:03 +02:00
• 780e53f168
  fix(pypi): parse Windows installer and egg filenames separately wickedOne 2026-08-01 15:54:24 +02:00
• 40837188dd
  resolve name and version for PEP 658 metadata sidecars wickedOne 2026-07-30 17:16:38 +02:00
• a7cad7828d
  Merge pull request #224 from git-pkgs/magic-integration Andrew Nesbitt 2026-08-01 11:26:51 +01:00
• 7dbf13e345
  Avoid repeated content type path lookup Andrew Nesbitt 2026-08-01 11:22:13 +01:00
• 36f3a51c65
  Detect content types when browsing files Andrew Nesbitt 2026-07-31 17:04:01 +01:00
• 1ba2684d78
  feat: add support for private-network upstreams Tilian R. Honig 2026-07-31 15:41:02 +02:00
• 9a9a82176d
  Bump modernc.org/sqlite from 1.54.0 to 1.55.0 (#219) dependabot[bot] 2026-07-31 09:32:38 +01:00
• 31ecca8cf1
  Bump github.com/prometheus/client_golang from 1.23.2 to 1.24.0 (#221) dependabot[bot] 2026-07-31 09:31:21 +01:00
• 1057ee926e
  Bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1 (#217) dependabot[bot] 2026-07-30 17:55:16 +01:00
• b56a1fed65
  Bump docker/login-action from 4.4.0 to 4.5.0 (#220) dependabot[bot] 2026-07-30 17:52:35 +01:00
• a5d456790d
  Bump actions/checkout from 7.0.0 to 7.0.1 (#218) dependabot[bot] 2026-07-30 17:14:36 +01:00
• bff83d2b2e
  Bump github.com/prometheus/client_golang from 1.23.2 to 1.24.0 dependabot[bot] 2026-07-30 15:14:15 +00:00
• daad1e4fd2
  Bump docker/login-action from 4.4.0 to 4.5.0 dependabot[bot] 2026-07-30 15:14:04 +00:00
• 21a8dfffaf
  Bump modernc.org/sqlite from 1.54.0 to 1.55.0 dependabot[bot] 2026-07-30 15:14:01 +00:00
• 9f42f4901c
  Bump actions/checkout from 7.0.0 to 7.0.1 dependabot[bot] 2026-07-30 15:13:32 +00:00
• df71095d4b
  Bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1 dependabot[bot] 2026-07-30 15:13:27 +00:00
• 90422697b8
  Bump google.golang.org/grpc from 1.81.1 to 1.82.1 (#216) v0.6.0 dependabot[bot] 2026-07-27 12:16:27 +01:00
• 44041d07a9
  Bump git-pkgs archives, enrichment, purl, registries, vulns (#215) Andrew Nesbitt 2026-07-27 12:15:57 +01:00
• d8c276de70
  Bump google.golang.org/grpc from 1.81.1 to 1.82.1 dependabot[bot] 2026-07-27 11:10:14 +00:00
• 5ec25f5781
  Bump git-pkgs archives, enrichment, purl, registries, vulns Andrew Nesbitt 2026-07-27 12:08:07 +01:00
• cf3741162f
  fix(upstream): honor npm and Cargo overrides (#200) Andrew Nesbitt 2026-07-26 19:11:24 +01:00
• 532e4925fe
  fix: proper handling of upstream registry 404s (#209) Tilian Honig 2026-07-26 20:07:46 +02:00
• 9f570bf778
  fix: consistently return 404s for all artifact types Tilian R. Honig 2026-07-23 19:02:11 +02:00
• e06f4eecbd
  Apply upstream auth to metadata requests Andrew Nesbitt 2026-07-23 17:31:26 +01:00
• 6b767d0128
  Merge pull request #211 from git-pkgs/dependabot/go_modules/github.com/git-pkgs/vers-0.3.0 Andrew Nesbitt 2026-07-23 17:01:32 +01:00
• 4737777e80
  Merge pull request #212 from git-pkgs/dependabot/github_actions/zizmorcore/zizmor-action-0.6.0 Andrew Nesbitt 2026-07-23 16:52:51 +01:00
• 238c628b31
  Merge pull request #213 from git-pkgs/dependabot/go_modules/modernc.org/sqlite-1.54.0 Andrew Nesbitt 2026-07-23 16:47:03 +01:00
• ced9c1198b
  Merge pull request #210 from git-pkgs/dependabot/github_actions/actions/setup-go-7.0.0 Andrew Nesbitt 2026-07-23 16:45:51 +01:00
• 13ae3970e9
  Bump github.com/git-pkgs/vers from 0.2.6 to 0.3.0 dependabot[bot] 2026-07-23 15:42:03 +00:00
• 7071d4fb0e
  Merge pull request #214 from git-pkgs/dependabot/go_modules/github.com/git-pkgs/vulns-0.2.0 Andrew Nesbitt 2026-07-23 16:39:43 +01:00
• 5ae5eab031
  Bump github.com/git-pkgs/vulns from 0.1.6 to 0.2.0 dependabot[bot] 2026-07-23 15:14:10 +00:00
• c3f1577017
  Bump modernc.org/sqlite from 1.53.0 to 1.54.0 dependabot[bot] 2026-07-23 15:14:01 +00:00
• d9b7a30294
  Bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 dependabot[bot] 2026-07-23 15:13:53 +00:00
• 60c72be65e
  Bump actions/setup-go from 6.5.0 to 7.0.0 dependabot[bot] 2026-07-23 15:13:49 +00:00
• 4f713e3d49
  fix: proper handling of upstream registry 404s Tilian R. Honig 2026-07-23 17:04:00 +02:00
• 0a3b9e58f2
  Merge pull request #201 from git-pkgs/fix-197-cooldown-scoped-purls Andrew Nesbitt 2026-07-17 18:18:54 -07:00
• cdbd1a9369 Canonicalize cooldown lookup PURLs to match config fix-197-cooldown-scoped-purls Andrew Nesbitt 2026-07-17 18:11:47 -07:00
• 785c989f12
  Merge pull request #206 from git-pkgs/dependabot/go_modules/github.com/git-pkgs/enrichment-0.5.0 Andrew Nesbitt 2026-07-17 10:23:03 -07:00
• 41ef27907e
  Bump github.com/git-pkgs/enrichment from 0.4.1 to 0.6.0 dependabot[bot] 2026-07-17 15:20:18 +00:00
• 95b4e34ebe
  Merge pull request #204 from git-pkgs/dependabot/go_modules/github.com/git-pkgs/purl-0.1.14 Andrew Nesbitt 2026-07-17 08:19:09 -07:00
• 61b91fbebb
  Merge pull request #203 from git-pkgs/dependabot/go_modules/github.com/go-chi/chi/v5-5.3.1 Andrew Nesbitt 2026-07-17 08:18:12 -07:00
• 4e0575a3ab
  Merge pull request #202 from git-pkgs/dependabot/docker/golang-1.26.5-alpine Andrew Nesbitt 2026-07-17 08:15:36 -07:00
• a79ec25bc9
  Merge pull request #205 from git-pkgs/dependabot/github_actions/docker/login-action-4.4.0 Andrew Nesbitt 2026-07-16 09:50:50 -07:00
• df997e5825
  Bump docker/login-action from 4.3.0 to 4.4.0 dependabot[bot] 2026-07-16 15:14:14 +00:00
• 96e113213d
  Bump github.com/git-pkgs/purl from 0.1.13 to 0.1.14 dependabot[bot] 2026-07-16 15:14:12 +00:00
• ec3cc35795
  Bump github.com/go-chi/chi/v5 from 5.3.0 to 5.3.1 dependabot[bot] 2026-07-16 15:14:06 +00:00
• cdf075695f
  Bump golang from 1.26.4-alpine to 1.26.5-alpine dependabot[bot] 2026-07-16 15:14:00 +00:00
• 23a7f5f250 Preserve npm scope separators in download URLs Andrew Nesbitt 2026-07-13 17:22:33 -07:00
• be15a0f826 Fix cooldown overrides for scoped package PURLs Andrew Nesbitt 2026-07-13 17:11:04 -07:00
• 0313ffa9eb fix(upstream): honor npm and cargo overrides Andrew Nesbitt 2026-07-13 16:57:04 -07:00
• 23364bd44a
  Merge pull request #196 from ychampion/fix-go-proxy-not-found-status Andrew Nesbitt 2026-07-12 23:32:24 +01:00
• 5b959d14b9 Preserve Go proxy fallback for missing modules ychampion 2026-07-10 22:59:15 +00:00
• 18c711b4d3
  Merge pull request #195 from git-pkgs/fix-filesystem-storage-path-validation Andrew Nesbitt 2026-07-09 17:46:32 +01:00
• 98150ea576
  Name empty path validation subtest Andrew Nesbitt 2026-07-09 17:41:05 +01:00
• 41465968cb
  Validate filesystem storage paths Andrew Nesbitt 2026-07-09 17:36:18 +01:00
• 95bb9d897a
  Merge pull request #193 from git-pkgs/dependabot/github_actions/goreleaser/goreleaser-action-7.2.3 Andrew Nesbitt 2026-07-09 17:19:29 +01:00
• 16e778970f
  Merge pull request #192 from git-pkgs/dependabot/github_actions/docker/login-action-4.3.0 Andrew Nesbitt 2026-07-09 16:41:34 +01:00
• a13e3ecaf1
  Merge pull request #191 from git-pkgs/dependabot/go_modules/golang.org/x/sync-0.22.0 Andrew Nesbitt 2026-07-09 16:41:08 +01:00
• c4f2b89290
  Merge pull request #190 from git-pkgs/dependabot/github_actions/docker/build-push-action-7.3.0 Andrew Nesbitt 2026-07-09 16:40:19 +01:00
• bb9e560b46
  Merge pull request #194 from git-pkgs/dependabot/github_actions/docker/metadata-action-6.2.0 Andrew Nesbitt 2026-07-09 16:39:00 +01:00
• 383d2089cf
  Bump docker/metadata-action from 6.1.0 to 6.2.0 dependabot[bot] 2026-07-09 15:14:26 +00:00
• defe1ec96d
  Bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 dependabot[bot] 2026-07-09 15:14:16 +00:00
• ea4eea4b11
  Bump docker/login-action from 4.2.0 to 4.3.0 dependabot[bot] 2026-07-09 15:14:07 +00:00
• f7b5dd2028
  Bump golang.org/x/sync from 0.21.0 to 0.22.0 dependabot[bot] 2026-07-09 15:14:04 +00:00
• df3ad91848
  Bump docker/build-push-action from 7.2.0 to 7.3.0 dependabot[bot] 2026-07-09 15:13:56 +00:00
• 38e2ff4ae4
  Merge pull request #188 from git-pkgs/http-timeout-config Andrew Nesbitt 2026-07-07 18:38:18 +01:00
• cb8caa81d2
  Merge pull request #189 from git-pkgs/bump-x-net Andrew Nesbitt 2026-07-07 18:38:03 +01:00
• 1a18dd4635
  Bump golang.org/x/net to v0.56.0 bump-x-net Andrew Nesbitt 2026-07-07 17:53:35 +01:00
• 0ae63066e2
  Make upstream HTTP timeout configurable http-timeout-config Andrew Nesbitt 2026-07-07 17:48:36 +01:00
• 1e6f0bbf8e implement registry.k8s.io as virtual registry proof of concept Maximilian Gaß 2026-07-07 11:09:07 +02:00
• 41ce55e696 handler: make authentication for container registry optional Maximilian Gaß 2026-07-07 11:09:07 +02:00
• 758c4c7673 handler: extract helper method authReq for upstream container requests Maximilian Gaß 2026-07-07 11:09:07 +02:00
• 95318dedff
  Merge pull request #181 from git-pkgs/dependabot/github_actions/actions/setup-go-6.5.0 Andrew Nesbitt 2026-07-02 16:44:01 +01:00
• b45757ea86
  Merge pull request #180 from git-pkgs/dependabot/github_actions/zizmorcore/zizmor-action-0.5.7 Andrew Nesbitt 2026-07-02 16:41:52 +01:00
• a8c0562c97
  Bump actions/setup-go from 6.4.0 to 6.5.0 dependabot[bot] 2026-07-02 15:13:48 +00:00
• 81d19b7632
  Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 dependabot[bot] 2026-07-02 15:13:19 +00:00
• 73ba229187
  Replace gcsblob with lightweight GCS backend andrew/lightweight-gcs-backend Andrew Nesbitt 2026-07-01 18:56:35 +01:00
• 7888296193
  Merge pull request #178 from philippdieter/main Andrew Nesbitt 2026-07-01 18:13:01 +01:00
• 787b76dfe7 Fix Composer 404 on minified metadata and add debug logging Philipp Dieter 2026-06-30 13:25:49 +02:00
• bb214bb7b2
  Bump git-pkgs and third-party dependencies (#177) v0.5.1 Andrew Nesbitt 2026-06-29 14:43:49 +01:00
• c59d40d896
  Bump git-pkgs and third-party dependencies bump-deps Andrew Nesbitt 2026-06-29 14:37:15 +01:00
• fbbc248f9e
  Merge f3897749df into f4a8c5606a aarnaud 2026-06-26 07:54:26 -04:00
• f4a8c5606a
  Fix package redirection to '/ui/packages' (#169) Bruno Clermont 2026-06-26 07:54:00 -04:00
• ca2514991d
  fix(composer): resolve *-dev versions from the ~dev metadata file (#174) wickedOne 2026-06-26 13:51:08 +02:00
• b2011c0a54
  Log actual database config instead of sqlite path (#176) Andrew Nesbitt 2026-06-26 07:42:30 -04:00
• 67571a2ac8 Log actual database config instead of sqlite path fix-database-log-173 Andrew Nesbitt 2026-06-25 13:03:50 -04:00
• 795edb4f91
  Bump actions/checkout from 6.0.3 to 7.0.0 (#175) dependabot[bot] 2026-06-25 11:28:18 -04:00